A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to configuration modification. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Metrics
Affected Vendors & Products
References
History
Wed, 28 Aug 2024 15:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2024-04-17T12:55:48.462Z
Updated: 2024-08-28T15:02:45.372Z
Reserved: 2023-11-22T15:48:03.435Z
Link: CVE-2023-45744
Vulnrichment
Updated: 2024-08-28T15:02:45.372Z
NVD
Status : Awaiting Analysis
Published: 2024-04-17T13:15:07.827
Modified: 2024-04-17T17:15:12.760
Link: CVE-2023-45744
Redhat
No data.